Document that Kerberos is for authentication, and does not encrypt data

or queries over the network.

diff --git a/doc/src/sgml/client-auth.sgml b/doc/src/sgml/client-auth.sgml
index b7e8a7b173fcfe77df6e34b2a1c05d7aca277e2a..ca4f0a4e81d39fee6704e4224c4c8a096f88a49e 100644 (file)
--- a/doc/src/sgml/client-auth.sgml
+++ b/doc/src/sgml/client-auth.sgml
@@ -653,6 +653,9 @@ local   db1,db2,@demodbs  all                         md5
     <ulink url="http://web.mit.edu/kerberos/www/">MIT Kerberos page</ulink>
     can be good starting points for exploration.
     Several sources for <productname>Kerberos</> distributions exist.
+    <productname>Kerberos</productname> provides secure authentication but
+    does not encrypt queries or data passed over the network;  for that
+    use <acronym>SSL</acronym>.
    </para>
 
    <para>